Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20313430323234.roa
File: 3130392e3131302e3138392e302f32342d3234203d3e20313430323234.roa (raw, json)
Hash identifier: bfwxCUBg4D2CwEGhUUnXYtBgWyciHsCveAU85FD7Vw0=
Subject key identifier: DF:BE:3A:00:CF:2A:FB:2D:D6:43:8B:74:A8:CF:6F:00:D7:97:DD:7B
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6E50095405412AA3F03ABCAC4B1E233B4C15640F
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20313430323234.roa
Signing time: Wed 15 Oct 2025 08:34:18 +0000
ROA not before: Wed 15 Oct 2025 08:29:18 +0000
ROA not after: Wed 14 Oct 2026 08:34:18 +0000
asID: 140224
IP address blocks: 109.110.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:50:09:54:05:41:2a:a3:f0:3a:bc:ac:4b:1e:23:3b:4c:15:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 15 08:29:18 2025 GMT
Not After : Oct 14 08:34:18 2026 GMT
Subject: CN=DFBE3A00CF2AFB2DD6438B74A8CF6F00D797DD7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:4e:2b:15:ae:87:b4:b5:12:34:7c:08:78:
e9:63:de:cd:c8:1e:ec:a6:6a:22:3c:26:92:22:5b:
9e:03:51:be:39:7a:1c:89:8b:7e:4f:40:0d:33:54:
48:a2:85:57:97:ec:eb:ef:0e:a0:bd:c2:fa:d1:43:
ae:e7:a4:d9:fd:ea:a5:ee:b8:dc:16:be:8b:7b:d7:
14:73:98:3e:bd:f6:f8:ab:9d:90:dd:ad:95:55:7a:
84:46:24:f2:8c:79:e4:fa:ce:84:6d:7f:e6:f5:74:
72:7c:61:b5:f8:84:df:9c:85:70:94:c0:0f:8d:d4:
3f:99:92:73:c8:07:24:05:73:fa:50:dc:3f:0b:cd:
75:c3:98:d3:bb:bd:cf:f0:8a:4e:1f:3a:e6:08:15:
2d:1e:6a:e2:45:51:90:84:32:7d:01:11:b2:bb:33:
6c:2b:53:56:c8:df:a0:d6:e4:79:7d:ea:78:8e:86:
77:a1:77:8b:62:ba:ff:c2:a8:79:4b:34:1e:e6:08:
af:8f:49:3a:9a:c9:e4:df:35:98:e8:55:b3:e7:57:
ad:c5:2f:25:1c:f4:26:b1:90:70:ce:d3:16:93:b9:
75:84:1a:f2:7f:66:ca:38:77:62:65:13:63:32:63:
6b:be:7a:c0:4c:ad:da:9b:48:b8:75:70:43:f1:c7:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BE:3A:00:CF:2A:FB:2D:D6:43:8B:74:A8:CF:6F:00:D7:97:DD:7B
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138392e302f32342d3234203d3e20313430323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:33:3a:80:ed:97:93:79:83:3b:07:00:bf:d4:8b:fd:dc:f7:
a1:83:12:1b:4b:dd:93:d1:e2:20:80:ec:43:80:4a:c9:39:6c:
7b:0e:c2:91:8b:71:2d:45:d5:ca:aa:3d:6a:21:4e:0e:0b:a4:
66:71:e8:a1:46:dc:fa:42:e9:e1:ad:7e:4b:ea:b3:d3:0e:cd:
30:88:18:ac:84:2f:f6:c4:cb:22:1a:e3:0a:79:fe:cf:f1:f7:
e9:27:5a:45:6e:d3:6a:cb:be:52:ad:c5:47:11:68:c5:03:b0:
69:7e:e4:e7:2b:fc:3b:df:a7:26:ec:6c:1a:33:4b:9f:21:b1:
26:33:df:b9:99:77:fb:bb:11:75:87:a0:a1:98:b0:b2:1f:de:
1a:1e:6e:6f:f2:cc:65:20:65:33:9b:ae:2b:eb:c1:1d:0d:58:
98:43:8a:5e:54:ad:e1:92:30:f2:f2:81:9e:d0:f4:6f:d1:8d:
48:eb:bb:8f:81:7d:a0:97:cc:7d:5d:30:92:77:c2:12:36:07:
89:ba:c7:b2:82:20:c9:a4:64:56:1f:18:a4:72:b6:8f:29:83:
1f:09:65:7a:3f:15:06:ff:6f:47:8e:14:65:6f:99:93:85:f2:
f8:36:28:67:e1:c7:35:58:fc:a2:fa:66:65:1e:06:23:70:11:
06:c1:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:30 2025 by rpki-client